Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/678637de-fcab-3434-ba1a-82cc0047b45d.roa
File:                     678637de-fcab-3434-ba1a-82cc0047b45d.roa (raw, json)
Hash identifier:          myDR+VMCzfMPekcteoIktmdaz8f5f54n3xhrXnHr/ak=
Subject key identifier:   25:6C:9F:EE:E2:F9:2E:CD:C1:29:47:1B:2F:5A:93:93:85:58:CF:A9
Certificate issuer:       /CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
Certificate serial:       010D0C9F4328584F7E8286D1147EEA59E903F2E0
Authority key identifier: 09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/678637de-fcab-3434-ba1a-82cc0047b45d.roa
Signing time:             Wed 14 Oct 2026 01:10:18 +0000
ROA not before:           Wed 14 Oct 2026 01:10:18 +0000
ROA not after:            Tue 12 Jan 2027 02:10:18 +0000
asID:                     402133
IP address blocks:        45.41.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:82:86:d1:14:7e:ea:59:e9:03:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd18d53-59c8-427f-9c2f-1f62eab97cb2
        Validity
            Not Before: Oct 14 01:10:18 2026 GMT
            Not After : Jan 12 02:10:18 2027 GMT
        Subject: CN=248498d2-8ca1-43d4-a2cd-7dfe1def36d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:0b:cc:ee:e0:97:a3:fc:a4:2a:00:b2:ed:
                    8d:ea:ea:31:2f:0c:78:73:7f:71:02:5a:a4:72:76:
                    53:14:94:10:70:10:5f:57:78:f7:4d:3a:64:94:f9:
                    e9:0c:02:b9:1c:ef:13:d1:38:16:79:4c:5e:7a:dd:
                    df:94:00:5d:3b:93:bc:86:53:a7:51:8c:02:1e:40:
                    b1:cd:db:65:89:84:3a:f9:bb:3e:6b:c3:d6:ee:7c:
                    0f:20:b1:97:07:ca:ce:a9:9a:a0:68:7f:5a:6d:26:
                    85:8e:78:ff:84:8e:24:85:a0:66:2f:86:cc:61:da:
                    53:94:92:c8:e1:52:df:27:12:97:ad:1d:b0:c9:e5:
                    fa:6a:e8:bb:4c:70:84:95:8f:36:e9:9f:af:30:59:
                    2c:61:75:be:f3:d8:3a:6f:6d:0e:eb:07:d7:86:ba:
                    a9:54:22:ea:fc:bf:37:7a:7a:ed:95:94:39:fc:56:
                    5e:95:b8:ad:98:bc:b8:b3:07:28:8d:68:0d:6f:3a:
                    87:30:a7:44:1b:b2:45:40:fa:a2:37:5f:29:6c:bf:
                    86:1a:2e:a0:58:9a:e6:51:49:47:5f:50:f4:ed:7e:
                    45:67:26:de:1e:01:3b:af:e8:bd:5e:c6:37:09:c0:
                    f9:6f:5e:96:2b:ab:b0:f5:ce:c7:1e:f3:13:99:6b:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:9F:EE:E2:F9:2E:CD:C1:29:47:1B:2F:5A:93:93:85:58:CF:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/678637de-fcab-3434-ba1a-82cc0047b45d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.crl

            X509v3 Authority Key Identifier:
                keyid:09:BA:D3:03:4B:6A:2C:C1:74:41:89:81:CB:15:5B:65:64:42:FF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2dd18d53-59c8-427f-9c2f-1f62eab97cb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3b:e0:73:5c:b6:91:97:27:a3:c6:72:9c:fa:11:53:6f:db:
         98:e9:88:b3:a4:50:ef:6a:db:f0:e5:53:67:3b:d6:8d:20:ca:
         5f:45:6f:c4:b8:e4:d8:9b:2a:a3:f0:05:53:88:d0:de:10:c6:
         a8:ce:5d:54:75:fa:44:a9:c3:3e:21:4e:c6:6d:57:a1:29:8b:
         d1:db:f8:e2:50:e3:e4:98:aa:26:b7:11:8e:c0:e1:b5:af:39:
         03:c4:59:80:f7:53:ae:df:32:16:33:27:e1:1f:c1:fd:85:e8:
         b7:a6:ba:68:e1:f5:7b:68:22:a6:b2:9f:3a:4c:26:5a:7f:30:
         29:64:ef:4d:13:a3:81:8f:d2:a4:23:1a:05:8f:2f:ae:25:31:
         33:60:58:52:9a:35:3b:cc:4b:c5:8f:ce:1b:0d:23:36:cd:43:
         8b:4e:55:fb:ad:11:ea:55:6b:80:7c:47:6a:09:3d:63:f9:f6:
         e8:0b:5a:52:2b:98:46:b9:d1:69:71:ee:b6:bb:cc:48:74:9e:
         54:b1:49:a3:6a:26:44:29:14:37:01:31:90:fe:3b:b9:c6:80:
         db:64:81:32:49:80:f1:ed:f1:62:8e:62:a1:4f:79:2c:37:13:
         37:9e:f7:23:80:a4:e4:14:aa:a1:5a:54:6f:c8:3c:ee:71:60:
         f1:a0:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:33:19 2026 by rpki-client